How to Configure SAML Authentication for Kiroku

Item

Details

Prerequisites

  • Prior setup is required in Kiroku.

  • You must have already created an account in Kiroku using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by Kiroku.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP-side Settings

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kiroku (SAML)".
    02.png

  3. From "Identity Provider Information," note down the values of "Identity Provider URL" and "Issuer / Entity ID," and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to the configuration on the Kiroku side.
Do not click the "Register" button yet — open Kiroku in a separate window.

Kiroku Settings

  1. Open "System Settings > General Settings."
    04.png

  2. Scroll to "Login Authentication" and check "Enable SAML Authentication."
    Configure the items that appear below as follows.
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    SSO URL The "Identity Provider URL" obtained from TrustLogin
    Public Key Certificate The contents of the "Certificate" obtained from TrustLogin
    Metadata Click "Download Service Provider Metadata" to
    download the metadata

    05.png

  3. Scroll to the very bottom and save by clicking the "Update" button.
    06.png


Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata downloaded from Kiroku to "Service Provider Settings > Metadata."
    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. Select "Kiroku (SAML)" on the "Register App" screen, and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds a Member

  1. In the "Admin Page > Apps" menu, search for and click the "Kiroku (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Kiroku

Item

Details

Prerequisites

  • Prior setup is required in Kiroku.

  • You must have already created an account in Kiroku using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by Kiroku.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP-side Settings

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kiroku (SAML)".
    02.png

  3. From "Identity Provider Information," note down the values of "Identity Provider URL" and "Issuer / Entity ID," and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to the configuration on the Kiroku side.
Do not click the "Register" button yet — open Kiroku in a separate window.

Kiroku Settings

  1. Open "System Settings > General Settings."
    04.png

  2. Scroll to "Login Authentication" and check "Enable SAML Authentication."
    Configure the items that appear below as follows.
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    SSO URL The "Identity Provider URL" obtained from TrustLogin
    Public Key Certificate The contents of the "Certificate" obtained from TrustLogin
    Metadata Click "Download Service Provider Metadata" to
    download the metadata

    05.png

  3. Scroll to the very bottom and save by clicking the "Update" button.
    06.png


Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata downloaded from Kiroku to "Service Provider Settings > Metadata."
    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. Select "Kiroku (SAML)" on the "Register App" screen, and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds a Member

  1. In the "Admin Page > Apps" menu, search for and click the "Kiroku (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.